mirror of
https://github.com/x1xhlol/system-prompts-and-models-of-ai-tools.git
synced 2026-06-17 23:09:35 +00:00
1.2 KiB
1.2 KiB
Enterprise delivery fabric — WS6 checklist
Reference: governance/github-and-release.md.
Repository / org controls
- Rulesets on
main(and release branches): no direct push, required reviews, required status checks. - CODEOWNERS for critical paths (
backend/app/api, auth, payments, agents). - Merge queue (when CI stable).
- Conversation resolution required before merge (policy).
Environments
- GitHub Environments:
dev,staging,canary,prodwith protection rules. - Required reviewers / wait timers where GitHub Enterprise allows (document limits for private repos per org tier).
- “Deployments must succeed” gate where applicable.
Secrets and provenance
- OIDC federation to cloud roles for deploy workflows (no long-lived cloud secrets in repo).
- Artifact attestations / provenance where supply-chain risk warrants.
Audit retention reality
- Enterprise audit log retention limits; Git events short retention — plan SIEM / warehouse streaming for audit-grade customers (link runbooks when added).
Evidence
Store screenshots or org policy links (internal) as evidence for enterprise questionnaires; do not commit secrets.